TI-2024-00634 CVE-2024-0688 · GHSA-6wrq-j9qq-5v7vWebSub (FKA. PubSubHubbub) <= 3.1.4 - Authenticated (Admin+) Stored Cross-Site ScriptingPriority LOW 22The "WebSub (FKA. PubSubHubbub)" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escapin…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00301 · Published 2024-01-25 · No fix listed CWE-79